[Secure-testing-commits] r56475 - data/CVE

Fri Oct 6 22:10:24 UTC 2017

Author: jmm
Date: 2017-10-06 22:10:24 +0000 (Fri, 06 Oct 2017)
New Revision: 56475

Modified:
   data/CVE/list
Log:
NFUs
historic chrome issue


Modified: data/CVE/list
===================================================================

--- data/CVE/list	2017-10-06 22:04:14 UTC (rev 56474)
+++ data/CVE/list	2017-10-06 22:10:24 UTC (rev 56475)
@@ -7966,7 +7966,7 @@
 CVE-2017-12271
 	RESERVED
 CVE-2017-12270 (A vulnerability in the gRPC code of Cisco IOS XR Software for Cisco ...)
-	TODO: check
+	NOT-FOR-US: Cisco
 CVE-2017-12269 (A vulnerability in the web UI of Cisco Spark Messaging Software could ...)
 	NOT-FOR-US: Cisco
 CVE-2017-12268 (A vulnerability in the Network Access Manager (NAM) of Cisco AnyConnect ...)
@@ -16432,9 +16432,9 @@
 CVE-2017-9274
 	RESERVED
 CVE-2017-9273 (The Bi-directional driver in IDM 4.5 before 4.0.3.0 could be ...)
-	TODO: check
+	NOT-FOR-US: IDM
 CVE-2017-9272 (The Bi-directional driver in IDM 4.5 before 4.0.3.0 could be ...)
-	TODO: check
+	NOT-FOR-US: IDM
 CVE-2017-9271
 	RESERVED
 CVE-2017-9270
@@ -40907,49 +40907,49 @@
 CVE-2017-0828 (An elevation of privilege vulnerability in the Huawei bootloader. ...)
 	NOT-FOR-US: Huawei bootloader
 CVE-2017-0827 (An elevation of privilege vulnerability in the MediaTek soc driver. ...)
-	TODO: check
+	NOT-FOR-US: MediaTek driver for Android
 CVE-2017-0826 (An elevation of privilege vulnerability in the HTC bootloader. ...)
 	NOT-FOR-US: HTC bootloader
 CVE-2017-0825 (An information disclosure vulnerability in the Broadcom wifi driver. ...)
-	TODO: check
+	NOT-FOR-US: Broadcom driver for Android
 CVE-2017-0824 (An elevation of privilege vulnerability in the Broadcom wifi driver. ...)
-	TODO: check
+	NOT-FOR-US: Broadcom driver for Android
 CVE-2017-0823 (An information disclosure vulnerability in the Android system (rild). ...)
-	TODO: check
+	NOT-FOR-US: Android
 CVE-2017-0822 (An elevation of privilege vulnerability in the Android system ...)
-	TODO: check
+	NOT-FOR-US: Android
 CVE-2017-0821
 	RESERVED
 CVE-2017-0820 (A vulnerability in the Android media framework (n/a). Product: ...)
-	TODO: check
+	NOT-FOR-US: Android media framework
 CVE-2017-0819 (A vulnerability in the Android media framework (n/a). Product: ...)
-	TODO: check
+	NOT-FOR-US: Android media framework
 CVE-2017-0818 (A vulnerability in the Android media framework (n/a). Product: ...)
-	TODO: check
+	NOT-FOR-US: Android media framework
 CVE-2017-0817 (An information disclosure vulnerability in the Android media framework ...)
-	TODO: check
+	NOT-FOR-US: Android media framework
 CVE-2017-0816 (An information disclosure vulnerability in the Android media framework ...)
-	TODO: check
+	NOT-FOR-US: Android media framework
 CVE-2017-0815 (An information disclosure vulnerability in the Android media framework ...)
-	TODO: check
+	NOT-FOR-US: Android media framework
 CVE-2017-0814 (An information disclosure vulnerability in the Android media framework ...)
-	TODO: check
+	NOT-FOR-US: Android media framework
 CVE-2017-0813 (A denial of service vulnerability in the Android media framework ...)
-	TODO: check
+	NOT-FOR-US: Android media framework
 CVE-2017-0812 (An elevation of privilege vulnerability in the Android media framework ...)
-	TODO: check
+	NOT-FOR-US: Android media framework
 CVE-2017-0811 (A remote code execution vulnerability in the Android media framework ...)
-	TODO: check
+	NOT-FOR-US: Android media framework
 CVE-2017-0810 (A remote code execution vulnerability in the Android media framework ...)
-	TODO: check
+	NOT-FOR-US: Android media framework
 CVE-2017-0809 (A remote code execution vulnerability in the Android media framework ...)
-	TODO: check
+	NOT-FOR-US: Android media framework
 CVE-2017-0808 (An information disclosure vulnerability in the Android framework (file ...)
-	TODO: check
+	NOT-FOR-US: Android
 CVE-2017-0807 (An elevation of privilege vulnerability in the Android framework (ui ...)
-	TODO: check
+	NOT-FOR-US: Android
 CVE-2017-0806 (An elevation of privilege vulnerability in the Android framework ...)
-	TODO: check
+	NOT-FOR-US: Android
 CVE-2017-0805 (A elevation of privilege vulnerability in the Android media framework ...)
 	NOT-FOR-US: Android media framework
 CVE-2017-0804 (A elevation of privilege vulnerability in the MediaTek mmc driver. ...)
@@ -95996,7 +95996,7 @@
 	- libav <removed>
 	NOTE: http://git.videolan.org/?p=ffmpeg.git;a=commit;h=3859868c75313e318ebc5d0d33baada62d45dd75
 CVE-2015-1206 (Heap-based buffer overflow in Google Chrome before M40 allows remote ...)
-	TODO: check
+	- chromium-browser 40.0.2214.91-1
 CVE-2015-1204 (Cross-site scripting (XSS) vulnerability in the Save Filters ...)
 	NOT-FOR-US: Save Filters functionality in the WP Slimstat plugin for WordPress
 CVE-2015-1190
@@ -102639,7 +102639,7 @@
 CVE-2014-8493 (ZTE ZXHN H108L with firmware 4.0.0d_ZRQ_GR4 allows remote attackers to ...)
 	NOT-FOR-US: ZTE ZXHN H108L
 CVE-2014-8492 (Multiple cross-site scripting (XSS) vulnerabilities in ...)
-	TODO: check
+	NOT-FOR-US: Wordpress plugin
 CVE-2014-8491
 	RESERVED
 CVE-2014-8490
@@ -103235,7 +103235,7 @@
 CVE-2014-8759
 	RESERVED
 CVE-2014-8758 (Cross-site scripting (XSS) vulnerability in Best Gallery Albums Plugin ...)
-	TODO: check
+	NOT-FOR-US: Wordpress plugin
 CVE-2014-8757 (LG On-Screen Phone (OSP) before 4.3.010 allows remote attackers to ...)
 	NOT-FOR-US: LG On-Screen Phone
 CVE-2014-8756 (The NcrCtl4.NcrNet.1 control in Panasonic Network Camera Recorder ...)
@@ -105925,7 +105925,7 @@
 CVE-2014-7241 (The TSUTAYA application 5.3 and earlier for Android allows remote ...)
 	NOT-FOR-US: TSUTAYA application for Android
 CVE-2014-7240 (Cross-site scripting (XSS) vulnerability in the Easy Contact Form ...)
-	TODO: check
+	NOT-FOR-US: Wordpress plugin
 CVE-2014-7239
 	RESERVED
 CVE-2014-7238


